Fake security tools on GitHub push backdoors and infostealers

Cybersecurity professionals are being targeted through malicious security projects hosted on GitHub. These fake tools are designed to appear legitimate but contain backdoors and information-stealing malware. The campaign specifically targets security researchers and professionals who are likely to download and test security-related tools. Once installed, the malware can establish persistent access via backdoors and exfiltrate sensitive information from compromised systems. This represents a supply chain-style attack leveraging the trust developers place in GitHub-hosted repositories. The targeting of security professionals is particularly concerning as they often have elevated access to sensitive systems and data.